CVE-2026-11754
Received Received - Intake

Observable Discrepancy in Seres Software syWEB Allows Account Footprinting

Publication date: 2026-08-27

Last updated on: 2026-08-27

Assigner: Computer Emergency Response Team of the Republic of Turkey

Description
Observable discrepancy vulnerability in Seres Software syWEB allows Account Footprinting. This issue affects syWEB: through 27082026. NOTE: The vendor was contacted and it was learned that the product is not supported.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-27
Last Modified
2026-08-27
Generated
2026-08-27
AI Q&A
2026-08-27
EPSS Evaluated
N/A
NVD
CVE-2026-11754
EUVD
EUVD-2026-67135

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
seres_software syweb to 27082026 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-203 The product behaves differently or sends different responses under different circumstances in a way that is observable to an unauthorized actor, which exposes security-relevant information about the state of the product, such as whether a particular operation was successful or not.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in Seres Software syWEB allows attackers to gather information about user accounts by observing differences in system responses. It affects versions up to 27082026 and is classified as an observable discrepancy vulnerability.

Impact Analysis

Attackers could use this to map out valid accounts in the system, enabling further attacks like brute force or targeted phishing. The vulnerability does not allow direct data access but aids in reconnaissance.

Compliance Impact

This vulnerability may violate data protection requirements under GDPR and HIPAA by enabling unauthorized account footprinting, which could lead to privacy breaches or unauthorized access to sensitive data.

Mitigation Strategies

Since the vendor states the product is not supported, discontinue use of Seres Software syWEB immediately. Isolate any systems running this software to prevent potential exploitation. Monitor network traffic for unusual activity related to this software.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-11754. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart